1.0 Purpose

This policy applies to the Canadian Union of Public Employees Local 8911 (“CUPE 8911”) and has been developed in compliance with the British Columbia Personal Information Protection Act (“PIPA”). PIPA sets out rules for how organizations such as ours can collect, use and disclose personal information.

2.0 Policy Statement

CUPE 8911 is committed to being accountable for how our organization treats personal information. This policy aligns with the principles and requirements set forth in the CUPE National Constitution, ensuring consistency with the democratic and legal obligations of our union. We recognize that the proper handling of personal information is both essential to the individuals concerned and to our reputation as an organization. It is our intention to protect members’ privacy and to be as open to suggestion, complaint, and inquiry as we can. Members are encouraged to bring concerns to CUPE 8911’s attention and to use the democratic processes of the union to ensure that personal information is appropriately protected within CUPE 8911 and by CUPE 8911.

CUPE 8911 will make reasonable efforts to inform the public, its members and its employees of this policy and any subsequent policy with respect to personal information under PIPA. To that end, a copy of the current policy will be available on request at the CUPE 8911 office.

This Privacy Policy is developed in accordance with the CUPE National Constitution, which governs all Local Unions and provides overarching guidance on union governance, member privacy, and democratic practices. In the event of any conflict or ambiguity, the provisions of the CUPE National Constitution shall take precedence. CUPE 8911 will ensure that this policy is regularly reviewed to remain consistent with constitutional updates.

3.0 Scope

This policy applies only to CUPE 8911 and personal information within its custody and/or control. It does not apply to personal information collected, used or disclosed by CUPE BC or CUPE National. In cases of overlap, this policy shall be applied in a manner consistent with the CUPE National Constitution, which governs all Local Unions and their activities.

4.0 Personal Information – Definitions

“Member” means an individual who has obtained membership in accordance with the CUPE 8911 Constitution.

“Individual” means a person who has provided personal information to CUPE 8911 and may or may not include members.

“Personal information” means information about an identifiable individual, such as someone’s name, age, home address, personal email and phone number, gender identity, sexual orientation, family or marital status, religion, race, political affiliation, social insurance number, income, education, employment history, disability, medical and health issue.

“Employee personal information” is information that is collected, used or disclosed solely for the purposes reasonably required to establish, maintain, manage or terminate an employment relationship between an employee (including a volunteer) and an organization. This may include information such as name, home address, educational history and employment history. This does not include contact information or work product information (see below).

“Contact information” means information that allows an individual to be contacted at work. It includes the name, position name or title, business telephone number, business address, business e-mail and business fax number for the individual. Contact information is not covered by PIPA or this policy.

“Work product information” is information that is prepared or collected by an employee as part of that individual’s work responsibilities, but does not include information about an individual who did not prepare or collect the information.

“Confidential business information” includes but is not limited to financial information and reports, membership information, campaigns and government relations plans and strategies.

5.0 Why We Collect and Use Personal Information

Unless the purposes for collecting personal information are obvious, we will communicate the purposes for which personal information is collected, either orally, electronically or in writing, before or at the time of collection. We will only collect individual or member information that is reasonably necessary to fulfilling the following purposes:

• To create and maintain a list of members and to contact members as is reasonably necessary;
• To verify the identity of members;
• To identify member preferences;
• To send out membership information;
• To communicate with individuals about CUPE 8911’s campaigns and government relations activities, including in-person, by mail, telephone and email, and online;
• To employ and manage staff;
• To conduct CUPE 8911’s financial and administrative affairs;
• To engage in campaigns and government relations activities, including maintaining a web and social media presence
• To promote CUPE 8911 and member organizations to the public;
• To encourage solidarity support of other labour and progressive organizations;
• To meet legal or regulatory requirements; and
• To conduct or commission polling, focus groups, surveys and other information-gathering activities reasonably related to CUPE 8911’s campaigns and government relations activities.

To fulfill these purposes, we collect and use personal information such as names, addresses, phone numbers, email addresses, social media contact information, communication preferences, member status and history, and past participation and interest in CUPE 8911 campaigns and government relations activities.

6.0 Limits on Collection, Use, and Disclosure

CUPE 8911 will only collect and use personal information that is necessary to fulfill the purposes identified at the time of collection or for a purpose reasonably related to the purposes identified in this policy. CUPE 8911 will not collect, use or disclose personal information except for these purposes unless we receive further consent from the individual. In compliance with the CUPE National Constitution, which upholds the protection of membership data and prohibits unauthorized disclosure, we will not release individual or member lists or personal information to non-CUPE organizations unless we have consent to do so.

We will only collect, use or disclose personal information in accordance with PIPA and any other applicable legislation. Individuals may withdraw consent to the collection, use or disclosure of their personal information at any time upon giving reasonable notice, unless PIPA permits collection, use or disclosure without consent.

If an individual withdraws consent, we will explain the likely consequences of this. For example, if a member withdraws consent for the collection, use and disclosure of their personal information, CUPE 8911 may be unable to provide them with services. Individuals or members cannot withdraw consent where this would frustrate the performance of a legal obligation.

7.0 How We Disclose Personal Information

CUPE 8911 may disclose personal information where authorized by PIPA or required by law. For employees of CUPE 8911, this includes disclosure to government bodies to comply with our obligations as an employer, such as remitting statutory deductions.

From time-to-time, CUPE 8911 retains third parties to do work for us that involves personal information. We ensure that there are agreements in place that commit third party organizations to providing services that adhere to our privacy policy.

CUPE 8911 will never sell or rent personal information to anyone.

8.0 Obtaining Consent to Collect, Use, and Disclose Personal Information

CUPE 8911 will get individuals’ consent to collect, use or disclose their personal information, except where we are legally authorized or required by law to do so without consent.

CUPE 8911 may collect, use, or disclose personal information without knowledge or consent as permitted by PIPA, including in the following limited circumstances:

• To create and maintain a list of members;
• To investigate a breach of an agreement, including the CUPE National Constitution, a contravention of a law, or to prevent fraud; and
• The collection is required or authorized by law.

Consent can be provided in writing, electronically, through an authorized representative or it can be implied where the purpose for collecting, using, or disclosing the personal information is considered obvious and the individual or member voluntarily provides personal information for that obvious purpose. For example, if an individual signs up for CUPE 8911 updates online, it is obvious that they are providing their contact information for that purpose.

Consent may also be implied where an individual is given notice and a reasonable opportunity to opt-out of their personal information being used and the individual does not opt out. Please see Section 6.0 Limits on Collection, Use, and Disclosure for withdrawal of consent.

In the case of employee personal information, PIPA allows CUPE 8911 to collect, use or disclose employee personal information without consent if it is reasonable for the purposes of establishing, managing or terminating an employment relationship. However, in such cases, the CUPE 8911 will notify employees of the collection, use or disclosure.

9.0 Retention of Personal Information

CUPE 8911 will keep personal information used to make a decision that directly affects individuals for at least one year after we make that decision. (PIPA requires this.)

CUPE 8911 will only retain personal information for as long as necessary to fulfil the identified purposes or as long as required for a legal or business purpose.

10.0 Keeping personal Information Secure

CUPE 8911 is committed to ensuring that information under our custody or control is protected against risks such as unauthorized access, collection, use, disclosure, copying, modification or disposal. CUPE 8911 ensures appropriate security arrangements are in place to protect your personal information from these risks, including physical, technological and operational security measures.

CUPE 8911 uses reasonably secure methods whenever we destroy personal information.

11.0 Ensuring Accuracy of Personal Information

CUPE 8911 will make reasonable efforts to ensure that personal information is accurate and complete.

Individuals or members may write to CUPE 8911 to request corrections to personal information under the control of CUPE 8911. If the CUPE 8911 is satisfied that a request for correction is reasonable, we will correct the personal information as soon as reasonably possible. If applicable, as soon as reasonably possible, we will also send an individual’s corrected personal information to each organization it was disclosed to during the year before we corrected it.

12.0 Accessing Your Personal Information

Individuals and members have the right to access their personal information under the control of CUPE 8911, subject to limited exceptions. CUPE 8911 will make a reasonable effort to assist and to respond to each applicant as accurately and completely as reasonably possible.

A request for access to personal information must be made in writing and must provide sufficient detail to identify the personal information being sought. CUPE 8911 may require individuals to prove their identity before giving them access to their personal information.

Upon request, CUPE 8911 will also provide individuals with information about the ways in which their personal information is or has been used, and, if applicable, to whom it has been disclosed.

PIPA allows CUPE 8911 to charge a “minimal” fee for providing an individual with access to their personal information. We will keep any such fees to a minimum, covering only the staff time dedicated to recovering such information and copying such information. An estimate of any fees to be charged will be given in advance.

CUPE 8911 will provide the requested personal information within 30 business days after it is requested or we will give the individual written notice if we need more time to respond.

In some cases, CUPE 8911 may not give an individual access to certain personal information where authorized or required by PIPA to refuse access. CUPE 8911 will not disclose information that would reveal personal information about another individual or confidential business information that, if disclosed, could harm the competitive position of the organization.

If a request is refused in whole or in part, CUPE 8911 will tell the applicant in writing, providing reasons for the refusal and outlining further steps that are available to the applicant. Members may also appeal such decisions in accordance with the CUPE National Constitution. In particular, members have the right to appeal a decision to refuse a request to the CUPE 8911 Executive Board. CUPE 8911 will make every reasonable effort to resolve the dispute without having to involve the Office of the Information and Privacy Commissioner for British Columbia (the “OIPC”). However, CUPE 8911 will inform applicants of their right to ask the OIPC to review the decision.

13.0 How to Complain, Ask for Access or Ask Questions

CUPE 8911’s Privacy Officer or their designate is responsible for ensuring CUPE 8911’s compliance with this policy and PIPA.

Individuals and members should direct any access requests, complaints, concerns or questions regarding CUPE 8911’s compliance in writing to the Privacy Officer. If the Privacy Officer is unable to resolve the concern, members can request that their concerns be considered by the CUPE 8911 Executive Board. CUPE 8911 will make every reasonable effort to resolve the concerns without having to involve the OIPC. However, the individual or member may also write to the OIPC.

Contact CUPE 8911’s Privacy Officer

Privacy Officer – #30-1880 Triumph St, Vancouver, BC, V5L 1K3

Email: admin@ecpbc.ca   Phone:  604-800-6088